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ACTION 


International application No. 

PCT/ IB 99/00274 


International filing date (day/month/year) 

03/02/1999 


(Earliest) Priority Date (day/month/year) 

04/02/1998 


Applicant 

CANAL+ SOCIETE ANONYME et a1 . 



This International Search Report has been prepared by this International Searching Authority and is transmitted to the applicant 
according to Article 18. A copy is being transmitted to the International Bureau. 

This International Search Report consists of a total of 3 sheets. 

[X] It is also accompanied by a copy of each prior art document cited in this report. 



Basis of the report 

a. With regard to the language, the international search was carried out on the basis of the international application in the 
language in which it was filed, unless otherwise indicated under this item. 



□ 



the International search was carried out on the basis of a translation of the international application furnished to this 
Authority (Rule 23,1 (b)). 



b. With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the international search 
was carried out on the basis of the sequence listing : 
I I contained in the international application in written form. 

filed together with the international application in computer readable fornn. 

furnished subsequently to this Authority in written form. 

furnished subsequently to this Authority in computer readble form. 



□ 
□ 
□ 
□ 



□ 

□ 
□ 



the statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
international application as filed has been furnished. 

the statement that the information recorded in computer readable form is identical to the written sequence listing has been 
furnished 

Certain claims were found unsearchable (See Box I). 
Unity of invention is lacking (see Box II). 



4. With regard to the title, 

[X] the text is approved as submitted by the applicant. 

I I the text has been established by this Authority to read as follows: 



5. With regard to the abstract, 

[X] the text is approved as submitted by the applicant. 

□ the text has been established, according to Rule 38.2(b), by this Authority as it appears in Box 111. The applicant may, 
within one month from the date of mailing of this international search report, submit comments to this Authority. 

6. The figure of the drawings to be published with the abstract is Figure No. 1 1 



[X] as suggested by the applicant. None of the figures. 

I I because the applicant failed to suggest a figure. 

I I because this figure better characterizes the invention. 
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A. CLASSIFICATION OFSUBJECT MATTER 

IPC 6 H04N1/00 H04N7/16 H04N7/167 



According to International Patent Classification (IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 

IPC 6 H04N 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and, where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ° Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



us 5 440 632 A (BACON KINNEY C ET AL) 
8 August 1995 



see column 2, line 6 - column 3, line 64 

see column 8, line 12 - column 9, line 52 

see column 10, line 51 - line 68 

see figures 2-4,7-10 

EP 0 562 295 A (THOMSON CONSUMER 
ELECTRONICS) 29 September 1993 
see page 2, line 12 - line 32 
see page 3, line 6 - line 19 
see figure 1 

-/-- 



1,2,13, 

16,17, 

24, 

27-29, 
34,35 



12,27, 
30,40 



Further documents are listed in the continuation of box C. 



ID 



Patent family members are listed in annex. 



° Special categories of cited documents : 

"A" document defining the general state of the art which is not 
considered to be of particular relevance 

"E" earlier document but published on or after the international 
filing date 

"L" document which may throw doubts on priority claim(s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or 
other means 

"P" document published prior to the international filing date but 
later than the priority date claimed 



'T" later document published after the international filing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underiying the 
invention 

"X" document of particular relevance; the claimed invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

"Y" document of particular relevance; the claimed invention 

cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

document member of the same patent family 



Date of the actual completion of the intemational search 

17 May 1999 


Date of mailing of the international search report 

21/05/1999 


Name and mailing address of the ISA 

European Patent Office, P.B. 5818 Patentlaan 2 
NL - 2280 HV Rijswijk 
Tel. (+31-70) 340-2040, Tx. 31 651 epo nl, 
Fax: (+31-70) 340-3016 


Authorized officer 

Van der Zaal , R 
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Citation of document, witli indication, where appropriate, of the relevant passages 


Relevant to claim No. 
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EP 0 723 371 A (THOMSON MULTIMEDIA SA) 
24 July 1996 

see page 3, column 3, line 57 - page 5, 
column 7, line 8 
see figures 2-4 




10,11, 
25,26 
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PDC/AB/19887 


See Notification of Transmittal of International 
FOR FURTHER ACTION Preliminary Examination Report (Form PCT/IPEA/416) 


International application No. 
PCT/IB99/00274 


International filing date (day/month/year) 
03/02/1999 


Priority date (day/month/year) 
04/02/1998 


International Patent Classification (IPC) or national classification and IPC 
H04N1/00 


Applicant 

CANAL+ SOCIETE ANONYME et al. 



1 . This international prelinninary examination report has been prepared by this International Preliminary Examining Authority 
and is transmitted to the applicant according to Article 36. 

2. This REPORT consists of a total of 5 sheets, including this cover sheet. 

□ This report is also accompanied by ANNEXES, i.e. sheets of the description, claims and/or drawings which have 
been amended and are the basis tor this report and/or sheets containing rectifications made before this Authority 
(see Rule 70.16 and Section 607 of the Administrative Instructions under the PCT), 

These annexes consist of a total of sheets. 



3. This report contains indications relating to the following items: 



Basis of the report 



II 


□ 


III 




IV 


□ 


V 




VI 


□ 


Vlt 


□ 


VIII 





citations and explanations suporting such statement 



Certain observations on the international application 



Date of submission of the demeu^d 
04/08/1999 


Date of completion of this report 
10.05.2000 


Name and mailing address of the international 
preliminary examining authority: 

^ European Patent Office 
fflS) 0-80298 Munich 

Tel. +49 89 2399 - 0 Tx: 523656 epmu d 
Fax: +49 89 2399 - 4465 


Authorized officer ^^-^^otsTv^ 

Haybach, R (l ^ l) 
Telephone No. +49 89 2399 8990 ^^"^""'^ 



Form PCT/I PEA/409 {cover sheet) (January 1994) 



INTERNATIONAL PRELIMINARY 
EXAMINATION REPORT 



International application No. PCT/I B99/00274 



I. Basis of the report 

1 . This report has been drawn on the basis of (substitute sheets which have been furnished to the receiving Office in 
response to an invitation under Article 14 are referred to in this report as "originally filed" and are not annexed to 
the report since they do not contain amendments.): 

Description, pages: 

1 -36 as originally filed 

Claims, No.: 

1 -42 as originally filed 

Drawings, sheets: 

1 /1 2-1 2/1 2 as originally filed 

2- The amendments have resulted in the cancellation of: 

□ the description. pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. □ This report has been established as if (some of) the amendments had not been made, since they have been 

considered to go beyond the disclosure as filed (Rule 70.2(c)): 

4. Additional observations, if necessary: 

III. Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 

The questions whether the claimed invention appears to be novel, to involve an inventive step (to be non-obvious), 
or to be industrially applicable have not been examined in respect of: 

□ the entire international application, 
la claims Nos. 41 ,42. 

because: 
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INTERNATIONAL PRELIMINARY 
EXAMINATION REPORT 



International application No. PCT/IB99/00274 



K the said international application, or the said clainns Nos. relate to the following subject matter which does 
not require an international preliminary examination (specify): 

see separate sheet 

□ the description, claims or drawings {indicate particular elements beloW) or said claims Nos. are so unclear 
that no meaningful opinion could be formed (specify): 



□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be formed. 

□ no international search report has been established for the said claims Nos. . 



V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 



1. Statement 



Novelty (N) 


Yes: 


Claims 






No: 


Claims 


1-40 


Inventive step (IS) 


Yes: 


Claims 






No: 


Claims 


1-40 


Industrial applicability (lA) 


Yes: 


Claims 


1-40 




No: 


Claims 





2. Citations and explanations 
see separate sheet 



VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 



Form PCT/IPEA/409 (Boxes l-VIII. Sheet 2) (January 1994) 



INTERNATIONAL PRELIMINARY International application No. PCT/IB99/00274 

EXAMINATION REPORT - SEPARATE SHEET 



1. The following docunnent is cited in the International Search Report is referred to in 
this report: 

D1 = EP-A-0 562 295 

Article 6. PCT 

2. The term "device for use in ..." in claims 1 and 28 is unclear since it leaves open if 
the receiver/decoder in which the device is to be used is part of the claimed 
apparatus or not. 

3. Claim 12 which refers to any previous claim is unclear since it claims a plurality of 
client applications and e.g. when referring directly back to claim 1 it is open what 
these client applications are or do. 

4. Claims 41 and 42 are unclear since the claims as such do not define the scope of 
protection sought, (see also Rule 6.2 PCT) 

Article 33(2) PCT 

5. Document D1 (see whole document) discloses a system for controlling several 
smart cards. The system either tries one after the other all smart cards to find the 
correct one to descramble an encoded program or the device stores some basic 
data of all smart cards such that for a given encrypted channel the device can 
switch immediately to the correct smart card. In this system, only one smartcard 
(the one in use) is powered up and operational. 

The set up is such that the processor in the decoder ("manipulation means") 
carries out the decoding process according to a predefined general algorithm (can 
be regarded as "manipulation protocol") and gets the parameters for adapting the 
decoding process to the incoming data form the smart card. This transfer of 
parameters can be regarded as "configuration of a manipulation protocol". 

Since in one mode the processor knows which card reader to use for a desired 
television program an identifier for the required card is generated and only the 
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INTERNATIONAL PRELIMINARY International application No. 

EXAMINATION REPORT - SEPARATE SHEET 



PCT/IB99/00274 



parameters of the selected card are loaded into the descrambler and are used by 
the manipulation algorithm of the decoder. This functionality is regarded as falling 
under the scope of "receiving a command instructing configuration of the 
manipulation protocol in dependence on to conditional access system": 

In this mode of operation of D1 the features claimed in the dependent claims are 
implicitly disclosed in D1. 

Thus, the subject matter of claims 1-40, as far as they can at present be understood, is 
known from D1 and these claims do not meet the requirements of Article 33(2) PCT. 

Miscellaneous 

6. The application does not meet the requirements of Rule 5.1 PCT, since the prior 
art as represented by document D1 is not disclosed therein. 
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Cozens. P.D. 
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100 Gray's Inn Road 
London WC1X8AL 
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WRITTEN OPINION 
(PCT Rule 66) 




This written opinion is the first drawn up by this International Preliminary Exannining Authority. 
This opinion contains indications relating to the following items: 
I H Basis of the opinion 



II 


□ 


III 




IV 


□ 


V 




VI 


□ 


VII 


n 


VIM 


IS 



citations and explanations supporting such statement 



The applicant is hereby invited to reply to this opinion. 

When? See the time limit irxiicated above. The applicant may. before the expiration of that time limit 
request this Authority tp grant an extension, see Rule 66.2(d). 

How? By submitting a written reply, accompanied, where appropriate, by amendments, according to Rule 66.3. 

For the form and the tar>guage of the amendments, see Rules 66.8 and 66.9. 

Also; For an'^additional opportunity to submit amendments, see Rule 66.4. 

For the examiner's obligation to consider amendments and/or arguments, see Rule 66.4 bis. 
For an informal communication with the examiner, see Rule 66.6. 

If no reply is filed, the international preliminary examination report will be established on the basis of ttiis opinion. 
The final date by which the international preliminary 

examination report must t>e established according to Rule 69.2 is; 04/06/2000. 



Name and mailing address of the international 
preliminary examining authority: 

J- - European Patent Office 
D-80298 Munich 
Tel. -h49 89 2399 - O Tx: 523656 epmu d 
Fax: +49 89 2399 - 4465 



Authorized officer / Examiner 
Hay bach, R 



Formalities officer (incl. extension of time limits) 
Corcos. E 

Telephone No. +49 89 2399 7418 
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WRITTEN OPINION International application No. PCT/IB99/00274 

L Basis of the opinion 

1 This opinion has been drawn on the basis of (substitute sheets which have been furnished to the receiving Office 
in response to an invitation under Article 14 are referred to in this opinion as "originaliy filed".): 

Description, pages: 

1 -36 as originally filed 

Claims, No.: 

1 -42 as originally filed 

Drawings, sheets: 

1/12-12/12 as originally tiled 



2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims. Nos.: 

□ the drawings, sheets: 

3. This opinion has been established as if (some of) the amendments had not been made, since they have been 
considered to go beyond the disclosure as filed (Rule 70.2(c)): 



4. Additional observations, if necessary: 



III. Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 

The questions whether the claimed invention appears to be novel, to involve an Inventive step (to be non-obvious), 
or to be industrially applicable have not been and will not be examined in respect of: 

□ the entire international application, 

K claims Nos. 41,42, 



because: 



la the said intematlonal application, or the said claims Nos. relate to the following subject matter which does 
not require an international preliminary examination {specify): 
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see separate sheet 

□ the description, claims or drawings (indicate particuiar eiements beloW) or said claims Nos. are so unclear 
that no meaningful opinion could be fomned (specify): 

□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be fomied. 

□ no intemational search report has been established for the said claims Nos. , 

V. Reasoned statement under Rule 66.2{a)(ii) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 

Novelty (N) 
Inventive step (IS) 
Industrial applicability (lA) 

2. Citations and explanations 
see separate sheet 

Vill. Certain observations on the international application 

The following obsen/ations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 



Claims 1-40 No 
Claims 

Claims 1-40 Yes 



Form PCT/IPEA/408 (Boxes I- VIII. Sheet 2) (January 1994) 



t 



WRITTEN OPINION 



International application No. PCT/IB99/00274 



SEPARATE SHEET 

1. The following document is cited In the International Search Report is referred to in 
this written opinion: 



Article 6, PCT 

2. The term "device for use in ..." in claims 1 and 28 is unclear since it leaves open if 
the receiver/decoder in which the device is to be used is part of the claimed 
apparatus or not. 

3. Claim 12 which refers to any previous claim is unclear since is claims a plurality of 
client applications and e.g. when referring directly back to claim 1 it is open what 
these client applications are or do. 

4. Claims 41 and 42 are unclear since the claims as such do not define the scope of 
protection sought, (see also Rule 6.2 PCT) 

Article 33(2) PCT 

5. Document D1 (see whole document) discloses a system for controlling several 
smart cards. The system either tries one after the other all smart cards to find the 
correct one to descramble an encoded program or the device stores some basic 
data of all smart cards such that for a given encrypted channel the device can 
switch immediately to the correct smart card. In this system, only one smartcard 
(the one in use) is powered up and operational. Thus only the parameters of the 
selected card are loaded into the descrambler and are used by the manipulation 
algorithm of the decoder. 

With this set up the features claimed in the dependent claims are implicitly 
disclosed in D1. 

Thus, the subject matter of claims 1-40, as far as they can at present be understood, is 
known from D1 and these claims do not meet the requirements of Article 33(2) PCT. 

Miscellaneous 
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D1 = EP-A-0 562 295 




yypUj£(g OPINION International application No. PCT/IB99/00274 
SEPARATE SHEET 



6. When amending the application in order to meet the objections set out above, the 
following points should also be addressed: 

- there should be only one independent claim per category with dependent claims 
as appropriate. 

- document D1 should be identified in the description. 
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international preJiminary examination report and its annexes, a any. esidui 



2. A copy of the report and its annexes 
to all the elected Offices. 



3. Where required by any of the elected Offices, the 



. a any. is being transmitted to the International Bureau for communication 



International Bureau will prepare an English translation of the 



import (LTrirof L^^^ will Uansmn such translation to those Offices. 



4. REMINDER 

For further details on the applicable time limits and requirements of the elected Offices, see Volume II of the 

PCT /^plicanrs Guide. 



Name and mailing address of the IPEA/ 



European Patent Office 
D-80298 Munich 

Tel. +49 89 2399 - 0 Tx. 523656 ©pmu d 
Fax- +49 89 2399 - 4465 



Authorized officer 
Thomas, R 

T0I.+49 89 2399-2247 
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International application No, 
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See Notification of Transmittal of International 
FOR FURTHER ACTION Preliminary Examination Report (F=orm PCT/IPEA/41 6) 



International filing date (dsy/month/year) 
03/02/1999 



Priority date (day/mpnth/year) 
04/02/1998 



Tnternational Patent Ctassificatioh (IPC) or national classification and IPC 



H04N1/00 
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and is transmitted to the applicant according to Article 36. 

This REPORT consists of a total of 5 sheets, including this cover sheet. 

wi K« AMMPyPS i e sheets of the description, claims and/or drawings which have 
(see R^TO-ie and Sectton 607 of the Administrative Instructions under the PCT). 
These annexes consist of a total of sheets. 



3. This report contains indications relating to the following items: 
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II 
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III 




IV 


□ 
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VI 
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VII 
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cHations and explanations suporting such statement 
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International application rto. PCT/IB99/00274 



I. Basis of the report 



^ u K Hr»«,n on the basis of (substitute sheets which have been furnished to the receiving Office in 
the report since they do not contain amendments,): 



Description, pages: 

^ .35 as originally filed 



Claims, No.: 
1^2 



as originally filed 



Drawings, sheets: 

1/12-12/12 as originally filed 



2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims. Nos.: 

□ the drawings, sheets: 



3. 



□ This report has been established as (some oO the -endnjents had not been made, since they have been 
considered to go beyond the disclosure as filed (Rule 70.2(c)). 



4. Additional obsenwitions, if necessary: 



„L „o„.e..*0,l»«n. o. .plnton with «g«d .. n»c«y. l"V«*ivo .tep »x. indusWa. ,pp,icab»»y 

^ ,„,s«o„s«.om«rm, c^«. Uwo-.,tonapp.a„,o be^ve, .o .,vo-, an i„van.h,a step »o ba non-C^lcus,, 

to be industrially applicable have not been examined in respect of. 



or 

□ the entire international application, 
la claims IMos. 41 .42. 

because: 



J:^<os I-VIU, Sheet 1) (January 1994) 



a the said international app.icatk,n. or the said cbims Nos. relate to the foltowing subject matter which does 
not require an international prelimihaiy examination {spec//>): 

see separate sheet 

□ the description, claims or drawings iinCcate particular elemer^ts teloW, or said claims Nos. are so unclear 
that no meaningful opinion could be fomned {specify). 



□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be formed. 

□ no international search report has been established for the said claims Nos. . 
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Article 6, PCT 

2. The term "device for use in ..." in claims 1 and 28 is unclear since it leaves open if 
the receiver/decoder in which the device is to be used is part of the claimed 
apparatus or not. 

3. Claim 12 which refers to any previous claim is unclear since it claims a plurality of 
client applications and e.g. when referring directly back to claim 1 it is open what 
these client applications are or do. 

4. Claims 41 and 42 are unclear since the claims as such do not define the scope of 
protection sought, (see also Rule 6.2 PCT) 



Article 33(2) PCT 

5. Document 01 (see whole document) discloses a system for controlling several 
smart cards. The system either tries one after the other all smart cards to find the 
correct one to descramble an encoded program or the device stores some basic 
data of all smart cards such that for a given encrypted channel the device cari 
switch immediately to the correct smart card. In this system, only one smartcard 
(the one in use) is powered up and operational. 

The set up is such that the processor in the decoder ("manipulation means") 
carries out the decoding process according to a predefined general algorithm (can 
be regarded as "manipulation protocol") and gets the parameters for adapting the 
decoding process to the incoming data form the smart card. This transfer of 
parameters can be regarded as "configuration of a manipulation protocol". 

Since in one mode the processor knows which card reader to use for a desired 
television program an Identifier for the required card is generated and only the 
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known from D1 and these claims do not meet the requirements of Article 33(2) PCT. 
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CONFIGURING METHOD AND DEVICE 

The present invention relates to a device for use in a receiver/decoder, and in 
particular to a device for configuring components of a receiver/decoder in response 
to a change in a manipulation protocol or conditional access system used by the 
5 receiver/decoder. The invention also relates to a method of configuring a 
receiver/decoder to access data; the data may be in any suitable form, such as in the 
form of a computer programme or a television programme. 

The present invention finds specific application in a broadcast digital television system 
in which received signals are passed through a receiver to a receiver/decoder and then 

10 to a television set. The term "receiver/decoder" used herein may connote a receiver 
for receiving either encoded or non-encoded signals, for example, television and/or 
radio signals. The term may also connote a decoder for decoding received signals. 
Embodiments of such receiver/decoders may include a decoder integral with the 
receiver for decoding the received signals, for example, in a "set-top box", such a 

15 decoder functioning in combination with a physically separate receiver, or such a 
decoder including additional functions, such as a web browser or a video recorder. 

The receiver/decoder may decode a compressed MPEG-type signal into a television 
signal for the television set. It is controlled by a remote controller handset, through 
an interface in the receiver/decoder. The receiver/decoder is used to process the 

20 incoming bit stream, and includes a computer system including a variety of (usually 
computer software) application modules which cause the system to perform a variety 
of control and other functions. The term MPEG refers to the data transmission 
standards developed by the International Standards Organisation working group 
"Motion Pictures Expert Group" and in particular but not exclusively the MPEG-2 

25 standard developed for digital television applications and set out in the documents ISO 
13818-1, ISO 13818-2, ISO 13818-3 and ISO 13818-4. In the context of the present 
patent application, the term includes all variants, modifications or developments of 
MPEG formats applicable to the field of digital data transmission. 
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A conditional access system enables an end user to access digital television broadcasts 
from one or more broadcast suppliers. In such a conditional access system, a 
Subscriber Authorization System (SAS) manages access rights to television 
programmes, available as commercial offers and sold according to different modes of 
5 commercialisation (subscription mode, pre-book mode, impulse mode). The SAS, 
according to those rights and to information received from a Subscriber Management 
System (SMS), generates using a message generator so-called "Entitlement 
Management Messages" (EMMs) which are broadcast by a message emitter via a 
multiplexer to the receiver/decoder of the subscriber to authorize him/her. An EMM 

10 may be designated to one subscriber or a group of subscribers. Entitlement Control 
Messages (ECMs) are messages sent in relation to scrambled programs. An ECM 
enables a user to descramble a control word to obtain the right to descramble a 
broadcast transmission, such as a television programme. During a broadcast 
transmission, the control word typically changes every few seconds, and so ECMs are 

15 also periodically transmitted to enable the changing control word to be descrambled. 

A security module, such as a smartcard, capable of decrypting messages relating to 
commercial offers (that is, one or more television programmes sold by the broadcast 
suppher) is inserted in the receiver/decoder. Using the receiver/decoder and smartcard, 
the end user may purchase events. 

20 It is expected that the receiver/decoder may be designed and manufactured by various 
different manufacturers. It may therefore have various different hardware designs, and 
may support one of a number of conditional access systems. Indeed, a 
receiver/decoder may support more than one conditional access system. In this case, 
the system used at any one time is selected by the subscriber, who is required to insert 

25 the correct smartcard into the receiver/decoder in order to access the chosen 
conditional access system. 



When the broadcasts are in the form of MPEG-type signals, the data is received in the 
form of data packets of typically 188 bytes within respective types of data stream, for 
example, video data streams, audio data streams and teletext data streams. Each 
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packet is preceded by a Packet Identifier (PID) of 13 bits, one PID for every packet 
transported in the MPEG data stream. Data packets relating to applications, EMMs 
and ECMs typically comprise one or more MPEG sections. ^ 

Parameters of each conditional access system, such as the frequency of signals 
5 received from a transponder, the values of the PIDs, and any other information 
necessary to download, for example, an EMM, are stored in the memory of the 
receiver/decoder. This can result in a large memory requirement for the 
receiver/decoder, particularly if the receiver/decoder supports several different 
conditional access systems. 

1 0 When one of these parameters is updated, or the conditional access system is changed, 
it' is necessary to update the components of the receiver/decoder which perform 
manipulation of the received datastream to enable the end user to access, for example, 
a television programme broadcast in the datastream. Therefore, there may be many 
applications stored in the receiver/decoder which require access to components of the 

15 receiver/decoder, adding to the complexity of the receiver/decoder. Such applications 
may be required to store values of parameters used in the manipulation of the received 
datastream, which can add further to the memory requirement of the receiver/decoder. 

The present invention seeks to solve this and other problems. 

The present invention provides a device for use in a receiver/decoder operable with 
20 different conditional access systems, the receiver/decoder including means for 
manipulating data received by the receiver/decoder according to a manipulation 
protocol which is configurable in dependence on the conditional access system, and 
means for storing parameters associated with the manipulation protocol, the device 
comprising: 

25 means for receiving a command instructing configuration of the manipulation 

protocol in dependence on the conditional access system; 

means for retrieving at least one of the parameters from the storage means in 
dependence on the command; and 
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means for outputting said parameter to the manipulation means for use in 
configuring the manipulation protocol, whereby the manipulation means is not required 
to receive all parameters necessary to configure the manipulation protocol for all of 
the conditional access systems. 

5 In one preferred embodiment, the manipulation means is provided in the form of a 
demultiplexer and filter, in which case the manipulation of the received data takes the 
form of filtering the received data. In this case, the term "manipulation protocol" 
refers to the setting of the filter which enables only specific components of the 
received data to be extracted by the receiver/decoder, and the configuration of the 
1 0 protocol is provided in the form of changing the filter to extract different components 
of the received datastream. 

As the manipulation means only receives a parameter related to one change of the 
manipulation protocol, the device (termed the "Conditional Access device") can 
provide an efficient means of configuring the manipulation protocol to enable data 
15 fi-om different conditional access systems to be downloaded. 

The Conditional Access device may be arranged to output the parameter to the 
manipulation means upon receipt of a command instructing output of the parameter. 
As the parameter, which may be used, for example, in configuring the manipulation 
protocol for one conditional access system, is sent only after the receipt of this second 
20 command, the retrieval of the parameters from the storage means can occur whilst the 
manipulation protocol is configured for a different conditional access system, and 
therefore whilst the manipulation means is manipulating data associated with this 
conditional access system. This can enable configuration of the manipulation protocol 
to be conducted efficiently. 

25 Preferably, the device is capable of receiving commands fi-om a configuring 
appHcation. The device may receive a command notifying the device of updating of 
the parameters stored in the storage means, which command may be output by the 
configuring application. 
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The parameters may include an identifier of the conditional access system currently 
being used by the receiver/decoder. This can enable parameters associated with the 
manipulation protocol to be stored in groups, each group being associated with a 
particular conditional access system. Thus, the outputting means may be arranged to 
5 output a parameter associated with the identifier of the conditional access system 
currently being used by the reeiver/decoder. The device may also be capable of 
changing an identifier of the conditional access system currently being used by the 
receiver/decoder in repsonse to a command from the configuring application. 

Each parameter may comprise at least one byte of a section of a data packet to be 
10 received by the receiver/decoder. Preferably each parameter comprises an identifier 
of a data packet to be received by the receiver/decoder. Thus, each parameter may 
comprise one or more of an identifier of an EMM and an identifier of an ECM. 

The device may be arranged to receive commands from a plurality of client 
applications for a plurality of parameters. 

15 The present invention also provides a receiver/decoder including a device as aforesaid, 
said manipulation means arranged to operate under the control of the device to 
manipulate data, and said means for storing parameters associated with the 
manipulation protocol. 

The present invention also extends to a method of configuring a receiver/decoder to 
20 access data, the receiver/decoder including means for manipulating data received by 
the receiver/decoder according to a manipulation protocol which is configurable in 
dependence on the conditional access system, and means for storing parameters 
associated with the manipulation protocol, the method comprising the steps of:- 

receiving a command instructing configuration of the manipulation protocol in 
25 dependence on the conditional access system; 

retrieving at least one of the parameters from the storage means in dependence 
on the command; and 

outputting said parameter to the manipulation means for use in configuring the 
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manipulation protocol, whereby the manipulation means is not required to receive all 
parameters necessary to configure the manipulation protocol for all of the conditional 
access systems. 

Analogous method features to the device features described above are also provided. 

5 The present invention also extends to a device for use in a receiver/decoder, the 
receiver/decoder including means for storing parameters associated v^ith manipulating 
data received by the receiver/decoder, and at least one application or further device, 
the device comprising: 

means for generating an identifier for at least one parameter; and 
10 means for outputting said identifier to said at least one application or further 

device. 

The identifier can enable the application or further device to access received data, 
based on the identifier. In other v^ords, the application or further device is not 
required to store all parameters for the configured manipulation protocol to access 
15 retrieved data so that the memory of the receiver/decoder can be used efficiently. 

The device may be used in a receiver/decoder which is operable with different 
conditional access systems, the parameters being associated with manipulating data 
received by the receiver/decoder according to a manipulation protocol which is 
configurable in dependence on the conditional access system. 

20 The at least one parameter may comprise an identifier of a data packet to be received 
by the receiver/decoder. Thus, the at least one parameter may comprise at least one 
of an identifier of an entitlement control message and respective identifiers of video, 
audio, teletext and subtitle data packets of an event to be received by the 
receiver/decoder. 

25 The device may be arranged to store a plurality of parameters, each having a 
respective assigned identifier. 
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The present invention extends to a receiver/decoder including a device as aforesaid, 
said means for storing parameters associated with the manipulation of data received 
by the receiver/decoder according to a manipulation protocol which is configurable in 
dependence on the conditional access system, and said appHcation or said further 
5 device. 

In one preferred embodiment, the different conditional access systems are different 
encryption protocols, the parameters are decryption parameters, the manipulation of 
data is decryption of encrypted data and the manipulation protocol is a decryption 
protocol. Therefore, the present invention also extends to a device for use in a 

10 receiver/decoder comprising: 

means for storing decryption parameters for use in decryption of encrypted data 
received by the receiver/decoder, the parameters being configurable to enable 
decryption of a plurality of different encryption protocols; 

means for receiving decryption parameters to configure at least one decryption 

15 protocol; and 

means for passing an identifier of a configured decryption protocol to at least 
one further device or application to enable said further device or said application to 
access, in decrypted form, said encrypted data based on said identifier, whereby said 
further device or application is not required to store all parameters necessary to effect 

20 decryption of said encrypted data. 

The present invention also provides a method of configuring a receiver/decoder, the 
receiver/decoder including means for storing parameters associated with manipulating 
data received by the receiver/decoder, and at least one application or further device, 
the method comprising: 
25 generating an identifier for at least one parameter; and 

outputting said identifier to said at least one application or further device. 

Analogous method features to the device features described above are also provided. 

Preferred features of the present invention will now be described, purely by way of 
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example, with reference to the accompanying drawings, in which :- 

Figure 1 shows the overall architecture of a digital television system according to the 
preferred embodiment of the present invention; 

Figure 2 shows the architecture of a conditional access system of the digital television 
5 system; 

Figure 3 shows the structure of an Entitlement Management Message used in the 
conditional access system; 

Figure 4 shows in detail the structure of the EMM; 

Figure 5 is a schematic diagram of a smartcard; 

10 Figure 6 is a schematic diagram of an arrangement of zones in the memory of the 
smartcard; 

Figure 7 is a schematic diagram of a PPV event description; 

Figure 8 is a functional block diagram of the receiver/decoder; 

Figure 9 is a schematic diagram of interfaces of the receiver/decoder; 

15 Figure 10 shows certain components of the virtual machine and run time engine in 
more detail; 

Figure 1 1 is a functional block diagram showing the arrangement of a Conditional 
Access device in a receiver/decoder; and 



Figure 12 shows the architecture of a receiver system for downloading sections from 
20 an MPEG data stream; 
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Figure 13 shows steps in a method of configuring a demultiplexer and filter to 
download an EMM; and 

Figure 14 shows steps in a method of configuring a demultiplexer and filter to 
download an ECM. 

5 Details of a suitable digital interactive television system may be found in our 
co-pending applications PCT/EP97/02106 - 021 17 to which reference should be made, 
and the disclosures of which are herein incorporated by reference. For ease of 
reference, parts described in more detail in the aforementioned specifications are 
generally designated by the reference numerals used in those specifications. 

10 An overview of a digital television broadcast and reception system 1000 is shown in 
Figure 1 . The invention includes a mostly conventional digital television system 2000 
which uses the known MPEG-2 compression system to transmit compressed digital 
signals. In more detail, MPEG-2 compressor 2002 in a broadcast centre receives a 
digital signal stream (typically a stream of video signals). The compressor 2002 is 

15 connected to a multiplexer and scrambler 2004 by linkage 2006. The multiplexer 
2004 receives a plurality of further input signals, assembles one or more transport 
streams and transmits compressed digital signals to a transmitter 2008 of the broadcast 
centre via linkage 2010, which can of course take a wide variety of forms including 
telecom links. The transmitter 2008 transmits electromagnetic signals via uplink 2012 

20 towards a satellite transponder 2014, where they are electronically processed and 
broadcast via notional downlink 2016 to earth receiver 2018, conventionally in the 
form of a dish owned or rented by the end user. The signals received by receiver 
2018 are transmitted to an integrated receiver/decoder 2020 owned or rented by the 
end user and connected to the end user's television set 2022. The receiver/decoder 

25 2020 decodes the compressed MPEG-2 signal into a television signal for the television 
set 2022. 

A conditional access system 3000 is connected to the multiplexer 2004 and the 
receiver/decoder 2020, and is located partly in the broadcast centre and partly in the 
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decoder. It enables the end user to access digital television broadcasts from one or 
more broadcast suppliers. A smartcard, capable of decrypting messages relating to 
commercial offers (that is, one or several television programmes sold by the broadcast 
supplier), can be inserted into the receiver/decoder 2020. Using the decoder 2020 and 
5 smartcard, the end user may purchase events in either a subscription mode or a pay- 
per-view mode. 

An interactive system 4000, also connected to the multiplexer 2004 and the 
receiver/decoder 2020 and again located partly in the broadcast centre and partly in 
the decoder, enables the end user to interact with various applications via a 
10 modemmed back channel 4002. 

The conditional access system 3000 is now described in more detail. 

With reference to Figure 2, in overview the conditional access system 3000 includes 
a Subscriber Authorization System (SAS) 3002. The SAS 3002 is connected to one 
or more Subscriber Management Systems (SMS) 3004, one SMS for each broadcast 
15 supplier, by a respective TCP -IP linkage 3006 (although other types of linkage could 
alternatively be used). Alternatively, one SMS could be shared between two broadcast 
suppliers, or one supplier could use two SMSs, and so on. 

First encrypting imits in the form of ciphering units 3008 utilising "mother" smartcards 
3010 are connected to the SAS by linkage 3012. Second encrypting units again in the 
20 form of ciphering imits 3014 utilising mother smartcards 3016 are connected to the 
multiplexer 2004 by linkage 3018. The receiver/decoder 2020 receives a "daughter" 
smartcard 3020. It is connected directly to the SAS 3002 by Communications Servers 
3022 via the modemmed back channel 4002. The SAS sends amongst other things 
subscription rights to the daughter smartcard on request. 

25 The smartcards contain the secrets of one or more commercial operators. The 
"mother" smartcard encrypts different kinds of messages and the "daughter" smartcards 
decrypt the messages, if they have the rights to do so. 
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The first and second ciphering units 3008 and 3014 comprise a rack, an electronic 
VME card with software stored on an EEPROM, up to 20 electronic cards and one 
smartcard 3010 and 3016 respectively, for each electronic card, one (card 3016) for 
encrypting the ECMs and one (card 3010) for encrypting the EMMs. 

5 The operation of the conditional access system 3000 of the digital television system 
will now be described in more detail with reference to the various components of the 
television system 2000 and the conditional access system 3000. 

Multiplexer and Scrambler 

With reference to Figures 1 and 2, in the broadcast centre, the digital video signal is 
10 first compressed (or bit rate reduced), using the MPEG-2 compressor 2002. This 
compressed signal is then transmitted to the multiplexer and scrambler 2004 via the 
linkage 2006 . in order to be multiplexed with other data, such as other compressed 
data. 

The scrambler generates a control word used in the scrambling process and included 
15 in the MPEG-2 stream in the multiplexer 2004. The control word is generated 
internally and enables the end user's integrated receiver/decoder 2020 to descramble 
the programme. 

Access criteria, indicating how the programme is commercialised, are also added to 
the MPEG-2 stream. The programme may be commercialised in either one of a 

20 number of "subscription" modes and/or one of a number of "Pay Per View" (PPV) 
modes or events. In the subscription mode, the end user subscribes to one or more 
commercial offers, or "bouquets", thus getting the rights to watch every channel inside 
those bouquets. In the preferred embodiment, up to 960 commercial offers may be 
selected from a bouquet of channels. In the Pay Per View mode, the end user is 

25 provided with the capability to purchase events as he wishes. This can be achieved 
by either pre-booking the event in advance ("pre-book mode"), or by purchasing the 
event as soon as it is broadcast ("impulse mode"). In the preferred embodiment, all 
users are subscribers, whether or not they watch in subscription or PPV mode, but of 
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course PPV viewers need not necessarily be subscribers. 

Both the control word and the access criteria are used to build an Entitlement Control 
Message (ECM). This is a message sent in relation with a scrambled program; the 
message contains a control word (which allows for the descrambling of the program) 
5 and the access criteria of the broadcast program. The access criteria and control word 
are transmitted to the second encrypting unit 3014 via the linkage 3018. In this unit, 
an ECM is generated, encrypted and transmitted on to the multiplexer and scrambler 
2004. During a broadcast transmission, the control word typically changes every few 
seconds, and so ECMs are also periodically transmitted to enable the changing control 
10 word to be descrambled. For redundancy purposes, each ECM typically includes two 
control words; the present control word and the next control word. 

Each service broadcast by a broadcast supplier in a data stream comprises a number 
of distinct components; for example a television programme includes a video 
component, an audio component, a sub-title component and so on. Each "of these 
15 components of a service is individually scrambled and encrypted for subsequent 
broadcast to the transponder 2014. In respect of each scrambled component of the 
service, a separate ECM is required. Altematively, a single ECM may be required for 
all of the scrambled components of a service. 

Programme Transmission 

20 The multiplexer 2004 receives electrical signals comprising encrypted EMMs from the 
SAS 3002, encrypted ECMs from the second encrypting imit 3014 and compressed 
programmes from the compressor 2002. The multiplexer 2004 scrambles the 
programmes and transmits the scrambled programmes, the encrypted EMMs and the 
encrypted ECMs as electric signals to a transmitter 2008 of the broadcast centre via 

25 linkage 2010. The transmitter 2008 transmits electromagnetic signals towards the 
satellite transponder 2014 via uplink 2012. 



Programme Reception 

The satellite transponder 2014 receives and processes the electromagnetic signals 



wo 99/40719 




PCT/IB99/00274 



- 13 - 



transmitted by the transmitter 2008 and transmits the signals on to the earth receiver 
2018, conventionally in the form of a dish owned or rented by the end user, via 
downlink 2016. The signals received by receiver 2018 are transmitted to the 
integrated receiver/decoder 2020 owned or rented by the end user and connected to the 
5 end user's television set 2022. The receiver/decoder 2020 demultiplexes the signals 
to obtain scrambled programmes with encrypted EMMs and encrypted ECMs. 

If the programme is not scrambled, that is, no ECM has been transmitted with the 
MPEG-2 stream, the receiver/decoder 2020 decompresses the data and transforms the 
signal into a video signal for transmission to television set 2022. 

10 If the programme is scrambled, the receiver/decoder 2020 extracts the corresponding 
ECM from the MPEG-2 stream and passes the ECM to the "daughter" smartcard 3020 
of the end user. This slots into a housing in the receiver/decoder 2020, The daughter 
smartcard 3020 controls whether the end user has the right to decrypt the ECM and 
to access the programme. If not, a negative status is passed to the receiver/decoder 

1 5 2020 to indicate that the programme cannot be descrambled. If the end user does have 
the rights, the ECM is decrypted and the control word extracted. The decoder 2020 
can then descramble the programme using this control word. The MPEG-2 stream is 
decompressed and translated into a video signal for onward transmission to television 
set 2022. 

20 Subscriber Management System (SMS) 

A Subscriber Management System (SMS) 3004 includes a database 3024 which 
manages, amongst others, all of the end user files, commercial offers, subscriptions, 
PPV details, and data regarding end user consumption and authorization. The SMS 
may be physically remote from the SAS. 

25 Each SMS 3004 transmits messages to the SAS 3002 via respective linkage 3006 
which imply modifications to or creations of Entitlement Management Messages 
(EMMs) to be transmitted to end users. 
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The SMS 3004 also transmits messages to the SAS 3002 which imply no 
modifications or creations of EMMs but imply only a change in an end user's state 
(relating to the authorization granted to the end user when ordering products or to the 
amount that the end user will be charged). 

5 As described later, the SAS 3002 sends messages (typically requesting information 
such as call-back information or billing information) to the SMS 3004, so that it will 
be apparent that commimication between the two is two-way. 

Entitlement Management Messages (EMMs) 

The EMM is a message dedicated to an individual end user (subscriber), or a group 
10 of end users, only (in contrast with an ECM, which is dedicated to one scrambled 
programme only or a set of scrambled programmes if part of the same commercial 
offer). Each group may contain a given number of end users. This organisation as 
a group aims at optimising the bandwidth; that is, access to one group can permit the 
reaching of a great number of end users. 

15 Various specific types of EMM can be used. Individual EMMs are dedicated to 
individual subscribers, and are typically used in the provision of Pay Per View 
services; these contain the group identifier and the position of the subscriber in that 
group. So-called "Group" subscription EMMs are dedicated to groups of, say, 256 
individual users, and are typically used in the administration of some subscription 

20 services. This EMM has a group identifier and a subscribers' group bitmap. 
Audience EMMs are dedicated to entire audiences, and might for example be used by 
a particular operator to provide certain free services. An "audience" is the totality of 
subscribers having smartcards which bear the same system identifier (CS ID). Finally, 
a "unique" EMM is addressed to the unique identifier of the smartcard. 

25 The structure of a typical EMM is now described with reference to Figure 3. 
Basically, the EMM, which is implemented as a series of digital data bits, comprises 
a header 3060, the EMM proper 3062, and a signature 3064. The header 3060 in turn 
comprises a type identifier 3066 to identify whether the type is individual, group. 
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audience or some other type and a length identifier 3068 which gives the length of the 
EMM. The EMM proper 3062 of course varies greatly according to its type. Finally, 
the signature 3064, which is typically of 8 bytes long, provides a number of checks 
against corruption of the remaining data in the EMM. 

5 Subscriber Authorization System fSAS) 

The messages generated by the SMS 3004 are passed via linkage 3006 to the 
Subscriber Authorization System (SAS) 3002, which in turn generates messages 
acknowledging receipt of the messages generated by the SMS 3004 and passes these 
acknowledgements to the SMS 3004. 

10 In overview the SAS comprises a Subscription Chain area to give rights for 
subscription mode and to renew the rights automatically each month, a Pay Per View 
Chain area to give rights for PPV events, and an EMM Injector for passing EMMs 
created by the Subscription and PPV chain areas to the multiplexer and scrambler 
2004, and hence to feed the MPEG stream with EMMs. If other rights are to be 

15 granted, such as Pay Per File (PPF) rights in the case of downloading computer 
software to a user's Personal Computer, other similar areas are also provided. 

One function of the SAS 3002 is to manage the access rights to television 
programmes, available as commercial offers in subscription mode or sold as PPV 
events according to different modes of commercialisation (pre-book mode, impulse 
20 mode). The SAS 3002, according to those rights and to information received from the 
SMS 3004, generates EMMs for the subscriber. 

The EMMs are passed to the Ciphering Unit (CU) 3008 for ciphering with respect to 
the management and exploitation keys. The CU completes the signature 3064 on the 
EMM and passes the EMM back to a Message Generator (MG) in the SAS 3002, 
25 where the header 3060 is added. The EMMs are passed to a Message Emitter (ME) 
as complete EMMs. The Message Generator determines the broadcast start and stop 
time and the rate of emission of the EMMs, and passes these as appropriate directions 
along with the EMMs to the Message Emitter. The MG only generates a given EMM 
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once; it is the ME which performs cychc transmission of the EMMs. 

On generation of an EMM, the MG assigns a unique identifier to the EMM. When 
the MG passes the EMM to the ME, it also passes the EMM ED. This enables 
identification df a particular EMM at both the MG and the ME. 

5 Figure 4 illustrates an exemplary EMM (in fact a PPV EMM, which is the simplest 
EMM). The PID (Packet identifier) 3170 comprises two portions, the actual ID 3172, 
and the length parameter for the packet 3174 (necessary in order that the start of the 
next packet can be identified). The whole PID is expressed in just one byte of 
information, 4 bits being reserved for the ID, and four for the length. 

10 Smartcard 

A daughter, or "subscriber'*, smartcard 3020 is schematically shown in Figure 5 and 
comprises an 8 bit microprocessor 110, such as a Motorola 6805 microprocessor, 
having an input/output bus coupled to a standard array of contacts 120 whicTi in use 
are connected to a corresponding array of contacts in the card reader of the 
15 receiver/decoder 2020, the card reader being of conventional design. The 
microprocessor 1 1 0 is also provided with bus connections to preferably masked ROM 
130, RAM 140 and EEPROM 150. 

The EEPROM 150 contains certain dynamically-created operator zones 154, 155, 156 
and dynamically-created data zones which will now be described with reference to 
20 Figure 6. 

EEPROM 150 comprises a permanent "card ID" (or manufacturer) zone 151 of 8 bytes 
which contains a permanent subscriber smartcard identifier set by the manufacturer of 
the smartcard 3020. 

When the smartcard is reset, the microprocessor 110 issues a signal to receiver/decoder 
25 2020, the signal comprising an identifier of the conditional access system used by the 
smartcard and data generated fi-om data stored in the smartcard, including the card ID. 
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This signal is stored by the receiver/decoder 2020, which subsequently utilises the 
stored signal to check whether the smartcard is compatible with the conditional access 



The EEPROM 150 also contains a permanent "random number generator" zone 152 
5 which contains a program for generating pseudo-random numbers. Such random 
numbers are used for diversifying transaction output signals generated by the smartcard 
3020 and sent back to the broadcaster. 

Below the random number generator zone 152 a permanent "management" zone 153 
of 144 bytes is provided. The permanent management zone 153 is a specific operator 
10 zone utilised by a program in the ROM 130 in the dynamic creation (and removal) of 
zones 154, 155, 156... as described below. The permanent management zone 153 
contains data relating to the rights of the smartcard to create or remove zones. 

Below the management zone 153 is a series of "operator ID" zones 154, 155, 156 for 

operators 1, 2 N respectively. Normally at least one operator ID zone will be 

15 preloaded into the EEPROM of the subscriber smartcard 3020 so that the end user can 
decrypt programmes broadcast by that operator. However further operator ID zones 
can subsequently be dynamically created using the management zone 153 in response 
to a transaction output signal generated via his smartcard 3020 by the end user 
(subscriber), as will subsequently be described. 

20 Each operator zone 154, 155, 156 is associated with one or more "operator data 
objects" stored in the EEPROM 150. As shown in Figure 6, a series of dynamically 
created "operator data" objects 157-165 are located below the operator ID zones. Each 
of these objects is labelled with: 

a) an "identifier" 1, 2, 3 .... N corresponding to its associated operator 1, 2, 3 ... 
25 N as shown in its left hand section in Figure 6; 

b) an "ID" indicating the type of object; and 

c) a "data" zone reserved for data, as shown in the right hand section of each 
relevant operator object in Figure 6. It should be understood that each operator is 



system being used by the receiver/decoder 2020. 
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associated with a similar set of data objects so that the following description of the 
types of data in the data objects of operator 1 is also applicable to the data objects of 
all the other operators. Also it will be noted that the data objects are located in 
contiguous physical regions of the EEPROM and that their order is immaterial. 

Deletion of a data object creates a "hole" 166 in the smartcard, that is, the number of 
bytes that the deleted objects had previously occupied are not immediately occupied. 
The thus "freed" number of bytes, or "hole" are labelled with: 

a) an "identifier" 0; and 

b) an "ID" indicating that the bytes are free to receive an object. 

The next data object created fills the hole, as identified by the identifier 0. In this 
maimer the limited memory capacity ('4 kilobytes) of the EEPROM 150 is efficiently 
utilised. 

Turning now to the set of data objects associated with each operator, examples of the 
data objects are now described. 

Data object 157 contains an EMM key used for decrypting encrypted EMM's received 
by the receiver/decoder 2020. This EMM key is permanently stored in the data object 
157. This data object 157 may be created prior to distribution of the smartcard 3020, 
and/or may be created dynamically when creating a new operator zone (as described 
above). 

Data object 159 contains ECM keys which are sent by the associated operator (in this 
case operator 1) to enable the end user to decrypt the particular "bouquet" of programs 
to which he has subscribed. New ECM keys are sent typically every month, along 
with a group subscription (renewal) EMM which renews the end user's overall right 
to view the broadcast from (in this case) operator 1 . The use of separate EMM and 
ECM keys enables viewing rights to be purchased in different ways (in this 
embodiment by subscription and individually (Pay Per View)) and also increases 
security. The Pay Per View (PPV) mode will be described subsequently. 
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Since new ECM keys are sent periodically, it is essential to prevent a user from using 
old ECM keys, for example by switching off the receiver/decoder or re-setting a clock 
to prevent expiry of an old ECM key so that a timer in the receiver/decoder 2020 
could be overridden. Accordingly operator zone 154 comprises an area (typically 
5 having a size of 2 bytes) containing an obsolescence date of the ECM keys. The 
smartcard 3020 is arranged to compare this date with the current date which is 
contained in received ECMs and to prevent decryption if the current date is later than 
the obsolescence date. The obsolescence date is transmitted via EMMs, as described 
above. 

10 With reference to Figure 7, the PPV event description 167 contains a "session ID" 168 
identifying the viewing session (corresponding to the program and the time and date 
of broadcasting) a "session mode" 169 indicating how the viewing right is being 
purchased (e.g. in pre-book mode), a "session index" 170 and a "session view" 171. 

In respect of receiving a programme in PPV mode, the receiver decoder 2020 
15 determines whether the programme is one sold in PPV mode. If so, the decoder 2020 
checks, using the items stored in the PPV event description 167 whether the session 
ID for the programme is stored therein. If the session ID is stored therein, the control 
word is extracted from the ECM. 

If the session ID is not stored therein, by means of a specific application the 
20 receiver/decoder 2020 displays a message to the end user indicating that he has the 
right to view the session at a cost of, say, 25 tokens, as read from the ECM or to 
connect to the communications servers 3022 to purchase the event. Using the tokens, 
if the end user answers "yes" (by means of remote controller 2026 (see Figure 2)) the 
decoder 2020 sends the ECM to the smartcard, the smartcard decreases the wallet of 
25 the smartcard 3020 by 25 tokens, writes the session ID 168, the session mode 169, the 
session index 170 and the session view 171 in the PPV event description 167 and 
extracts and deciphers the control word from the ECM. 

In the "pre-book" mode, an EMM will be passed to the smartcard 3020 so that the 
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smartcard will write the session ID 168, the session mode 169, the session index 170 
and the session view 171 in the PPV event description 167 using the EMM. 

The session index 1 70 can be set to differentiate one broadcast jfrom the other. This 
feature permits authorization to be given for a subset of broadcasts, for example, 3 
5 times out of 5 broadcasts. As soon as an ECM with a session index different from the 
current session index 170 stored in the PPV event description 167 is passed to the 
smartcard, the number of the session view 171 is decreased by one. When the session 
view reaches zero, the smartcard will refuse to decipher an ECM with a different 
session index to the current session index. 

10 The initial value of the session view depends only on the way in which the broadcast 
supplier wishes to define the event to which it relates; the session view for a respective 
event may take any value. 

The microprocessor 110 in the smartcard implements a coimting and a comparison 
program to detect when the limit to the number of viewings of a particular program 
15 has been reached. 

All of the session ID 168, the session mode 169, the session index 170 and the session 
view 171 in the PPV event description 167 may be extracted from the smartcard using 
the "call-back" procediire as described previously. 

Each receiver/decoder 2020 contains an identifier which may either identify uniquely 
20 that receiver/decoder or identify its manufacturer or may classify it in some other way 
in order to enable it to work only with a particular individual smartcard, a particular 
class of smartcards made by the same or a corresponding manufacturer or any other 
class of smartcards which are intended for use with that class of receiver/decoders 
exclusively. 

25 In this manner the receiver/decoders 2020 which have been supplied by one broadcast 
supplier to the consumer are protected against the use of non-authorised daughter 
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smartcards 3020. 
Receiver/Decoder 

With reference to Figure 8, the receiver/decoder 2020 comprises a run time engine 
4008 running under the control of a microprocessor and a common application 
5 programming interface 4054. They are installed in every receiver/decoder 2020 so that 
all receiver/decoders 2020 are identical from the application point of view. 

For the purposes of this description, an application is preferably a piece of computer 
code for controlling high level functions of preferably the receiver/decoder 2020. For 
example, when the end user positions the focus of a remote controller on a button 
10 object seen on the screen of the television set 2022 and presses a validation key, the 
instruction sequence associated ;with the button is run. 

An interactive application proposes menus and executes commands at the request of 
the end user and provides data related to the purpose of the application. Applications 
may be either resident applications, that is, stored in the ROM (or FLASH or other 
15 non- volatile memory) of the receiver/decoder 2020, or broadcast and downloaded into 
the RAM or FLASH memory of the receiver/decoder 2020. 

Applications are stored in memory locations in the receiver/decoder 2020 and 
represented as resource files. The applications can use data files, such as icon library 
files, image files, character font files, colour table files and ASCII text files. An 
20 interactive application can also obtain on-line data by effecting inputs and/or outputs. 

Referring to Figure 9, the receiver/decoder 2020 includes several interfaces; 
specifically, a tuner 4028 for the MPEG signal flow, a serial interface 4030, a parallel 
interface 4032, and two card readers 4036, one for a smartcard 3020 forming part of 
the system and one for bank cards (used for making payments, home banking, etc) or 
25 another smart card. The receiver/decoder also includes an interface 4034 to a 
modemmed back channel 4002 to the television signal producer, so that the user can 
indicate preferences, etc back to the television signal (prograname) producer. 
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The receiver/decoder 2020 contains memory divided into a RAM volume, a FLASH 
volume and a ROM volume, but this physical organization is distinct from the logical 
organization. The memory may further be divided into memory volumes associated 
with the various interfaces. From one point of view, the memory can be regarded as 
5 part of the hardware; from another point of view, the memory can be regarded as 
supporting or containing the whole of the system shown apart from the hardware. 

With reference to Figure 9, the system can be regarded as centred on a run time 
engine 4008 forming part of a virtual machine 4007. This is coupled to appUcations 

10 on one side (the "high level" side), and, on the other side (the "low level" side), via 
various intermediate logical units discussed below, to the receiver/decoder hardware 
4061. The receiver/decoder hardware can be regarded as including the various ports 
or interfaces as discussed above (the interface 2030 for the handset 2026, the MPEG 
stream interface 4028, the serial interface 4030, the parallel interface 4032, the 

15 interfaces to the card readers 4036, and the interface 4034 to the modemmed back 
channel 4002), 

With reference to Figure 8, various applications 4057 are coupled to the unit 4007; 
some of the more commonly used applications may be more or less permanently 
resident in the system, as indicated at 4057, while others will be downloaded into the 
20 system, eg from the MPEG data stream or from other ports as required. 

The imit 4007 includes, in addition to the run time engine 4008, some resident library 
functions 4006 which include a toolbox 4058. The library contains miscellaneous 
functions in C language used by the engine 4008. These include data manipulation 
such as compression, expansion or comparison of data structures, line drawing, etc. 
25 The library 4006 also includes information about firmware 4060 in the 
receiver/decoder 2020, such as hardware and software version nimibers and available 
RAM space, and a function used when downloading a new device 4062. Functions 
can be downloaded into the library, being stored in Flash or RAM memory. 

The run time engine 4008 is coupled to a device manager 4068 which is coupled to 
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a set of devices 4062 which are coupled to device drivers 4060 which are in turn 
coupled to the ports or interfaces. In broad terms, a device driver can be regarded 
as defining a logical interface, so that two different device drivers may be coupled to 
a common physical port. A device will normally be coupled to more than one device 
5 driver; if a device is coupled to a single device driver, the device will normally be 
designed to incorporate the full functionality required for communication, so that the 
need for a separate device driver is obviated. Certain devices may communicate 
among themselves. 

Each function of the receiver/decoder 2020 is represented as a device 4062. Devices 
10 can be either local or remote. Local devices 4064 include smartcards, SCART 
connector signals, modems, serial and parallel interfaces, a MPEG video and audio 
player and an MPEG section and table extractor. Remote devices 4066, executed in 
a remote location, differ fi-om local devices in that a port and procedure must be 
defined by the system authority or designer, rather than by a device and device driver 
15 provided and designed by the receiver/decoder manufacturer. 

When a new device 4062 is created, it can be installed in existing receiver/decoders 
2020 by downloading the relevant application 4056 from the broadcast centre. This 
downloading is performed in the receiver/decoder 2020 by an application 4056 which 
checks the hardware and software versions and, if correct, loads the software module 
20 representing the new device 4062 and asks a procedure of the library 4006 to install 
the new device code within the firmware (in Flash memory). This can provide a 
flexible and secure installation of new functions within the receiver/decoder 2020 
without affecting the rest of the software. 

The device manager 4068 is a common software interface between the application 
25 4056 and the specific functions of the receiver/decoder 2020. The device manager 
4068 controls access to devices 4062, declares receipt of an unexpected event, and 
manages shared memory. 

The run time engine 4008 runs under the control of the microprocessor and a common 
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application programming interface. They are installed in every receiver/decoder 2020 
so that all receiver/decoders 2020 are identical from the application point of view. 

The engine 4008 runs applications 4056 on the receiver/decoder 2020. It executes 
interactive applications 4056 and receives events from outside the receiver/decoder 
5 2020, displays graphics and text, calls devices for services and uses fimctions of the 
library 4006 connected to the engine 4008 for specific computation. 

The run time engine 4008 is an executable code installed in each receiver/decoder 
2020, and includes an interpreter for interpreting and running apphcations. The 
engine 4008 is adaptable to any operating system, including a single task operating 

10 system (such as MS-DOS). The engine 4008 is based on process sequencer units 
(which take various events such as a key press, to carry ,:Out various actions), and 
contains its own scheduler to manage event queues from the different hardware 
interfaces. It also handles the display of graphics and text. A process sequencer unit 
comprises a set of action- groups. Each event causes the process sequencer unit to 

15 move from its current action-group to another action- group in dependence on the 
character of the event, and to execute the actions of the new action-group. 

The engine 4008 comprises a code loader to load and download applications 4056 into 
the receiver/decoder memory 2028. Only the necessary code is loaded into the RAM 
or Flash memory, in order to ensure optimal use. The downloaded data is verified 

20 by an authentication mechanism to prevent any modification of an application 4056 
or the execution of any xmauthorized application. The engine 4008 fiirther comprises 
a decompressor. As the apphcation code (a form of intermediate code) is compressed 
for space saving and fast downloading from the MPEG-2 transport stream or via a 
built-in receiver/decoder mode, the code must be decompressed before loading it into 

25 the RAM. The engine 4008 also comprises an interpreter to interpret the application 
code to update various variable values and determine status changes, and an error 
checker. 

Before using the services of any device 4062, a program (such as an application 
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instruction sequence) has to be declared as a "client", that is, a logical access- way to 
the device 4062 or the device manager 4068. The manager gives the client a client 
number which is referred to in all accesses to the device. A device 4062 can have 
several clients, the number of clients for each device 4062 being specified depending 
5 on the type of device 4062. A client is introduced to the device 4062 by a procedure 
"Device: Open Channel". This procedure assigns a client number to the client. A 
client can be taken out of the device manager 4068 client list by a procedure "Device: 
Close Chaimel". 

Each device interfaces with an application under the control of the device manager 
10 4068 by means of one of the three standard procedures, which are common to other 
devices. Information may be passed between an application and the device by means 
of tables. The three basic procedures are summarised briefly below:- 

1) Device: Call. This command can be used by an application for performing 
synchronous commands or data transfer. Execution of the application is suspended 

15 xmtil control is returned when the operation by the device driver has completed; this 
allows operations which must be performed in strict sequence to be controlled reliably. 

2) Device: I/O. This command allows asynchronous operation. That is, an 
application can send a request for a data transfer or a particular function to be 
performed by the device driver and execution of the application can continue while 

20 the data transfer or function is performed by the device driver. 

3) Device: Event. The event trapping function enables events to be signalled by 
the device to an application, and for particular action to be taken by the application 
in response to the event independently of the code the application is executing at the 
time the event is signalled; effectively the application is interrupted. Events may be 

25 prioritised. Events may be used to signal events occurring on the interface, such as 
a bus reset, or to provide monitoring of asynchronous commands, for example by 
signalling completion of a requested data transfer. 
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As noted above, the main loop of the run time engine is coupled to a variety of 
process sequencer units, and when the main loop encounters an appropriate event, 
control is temporarily transferred to one of the process sequencer units. 

Referring to Figure 10, the device manager includes a queue 100 into which events 
5 from the devices are passed for temporary storage. At suitable intervals, the virtual 
machine sends a signal to this queue to extract the first item from it. This event item 
is moved to a queue structure 101 in the virtual machine. Depending on the priority 
level of the event item, it is inserted into the appropriate one of the 5 queues 0 to 4. 
Event items are extracted from the queue structure 101 by a queue selector unit 102 
10 under the control of the mn time engine. 

When an event is selected from the queue stmcture 101, it is passed to a process 
sequencer unit engine 104, which consists of a process sequencer unit driver 105 and 
a set of process sequencer units 106. Each process sequencer unit is a set of action- 
groups linked together, so that each step from one action-group to the next action- 

15 group is, in general, dependent on the current action-group and the nature of the event. 
Different process sequencer units have different sizes and complexities, including one 
in which the "next" action-group, ie the action-group to which the system steps on in 
response to an event, is dependent solely on the nature of the event but is independent 
of the current action-group. Also, as is shown at the right-hand side of the process 

20 sequencer units block, there may be several copies of a process sequencer imit, ie 
several identical process sequencer units, to deal eg with several separate data streams 
using identical protocols through a single port. 

When an event is selected, it is passed to the appropriate process sequencer unit. This 
selects the appropriate outlet from the current action-group on the process sequencer 
25 unit. This results in the appropriate next action-group being selected and the actions 
in that action-group being performed, involving eg the sending of a message to the 
device manager or the execution of an instruction sequence. Action-groups in the 
process sequencer unit can also send event messages to other process sequencer vmits. 
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If an instruction sequence is selected, the identification of the instruction sequence is 
sent to a instruction sequence selector 107. This obtains the desired instruction 
sequence from a instruction sequence memory 108 and passes it to a instruction 
sequence interpreter 109, which executes the instruction sequence. 

5 The system also includes a filter 110, which is loaded with event types eg from the 
process sequencer units 106. When an event item is passed from the queue 100 in 
the device manager to the queue structure 101 in the virtual machine, its type or 
character is matched against the list in the filter 110, and if it is of a type which is not 
recognized, it is rejected. This ensures that if say the device manager or the keyboard 
10 generates events of a type which the virtual machine cannot deal with, those events 
are not passed to the queue structure 101. (If events of this kind were passed to the 
queue structure 101, either they would accumulate in that queue structure or they 
might cause malfunctioning of the process sequencer unit engine 104.) 

Thus, it can be seen that our basic system provides a platform having considerable 
1 5 flexibility in enabling an application to communicate with a variety of devices. 

Conditional Access Device 

With reference to Figures 1 1 and 12, the receiver/decoder 2020 includes a conditional 
access device, or CA device, 4100. The CA device 4100 is coupled via port 4103 to 
device driver 4102 for the smartcard reader 4036 and via port 4105 to device driver 
20 4104 for a demultiplexer and filter 4502 of the receiver/decoder 2020. The CA device 
is also coupled via port 4101 to the device manager 4068 to receive commands from, 
and transmit messages to, applications 4056', 4057' stored in the receiver/decoder 
2020 and to access the memory 4024 of the receiver/decoder 2020 in order, for 
example, to retrieve data stored therein, 

25 The CA device 4100 can inform a configuring application, for example a resident 
application 4057', of the conditional access systems supported by the receiver/decoder 
and the conditional access system currently being used by the receiver/decoder. Such 
a configuring application is able to change the conditional access system currently 
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being used by the receiver/decoder 2020. The type of conditional access system 
currently being used by the receiver/decoder is written in a buffer in the memory 4024 
of the receiver/decoder as allocated by the CA device 4100. The address of this buffer 
may be transmitted to the configuring application 4057' via device manager 4068. 
5 This buffer also contains information regarding the version of the conditional access 
system currently being used by the receiver/decoder, each conditional access system 
supported by the receiver/decoder, and the version of each conditional access system 
supported by the receiver/decoder. 

A command "CALL_SELECT" enables an application program to select the 
10 conditional access system to be used by the receiver/decoder. The type and version 
number of the conditional access system are stored in a memory zone in the memory 
4024 of the receiver/decoder. The address of the memory zone associated with any 
conditional access system supported by the receiver/decoder is also transferable to the 
configuring application 4057' via device manager 4068. Following receipt of the 
15 address of the memory zone, the application program sends the address to the CA 
device 4100 in this command. In response to the command, the CA device 4100 
changes the data stored in the buffer in the memory zone of the memory 4024. The 
command retums a signal indicating completion of the command, or failure of the 
command if an EMM or ECM is either being loaded by the receiver/decoder 2020 or 
20 being processed by the receiver/decoder 2020. 

The CA device 4100 enables EMMs to be loaded, and ECMs to be demultiplexed for 
component scrambling, for any conditional access system supported by the 
receiver/decoder 2020. 

With reference to Figure 12, electromagnetic signals received by receiver 2018 are 
25 transmitted to MPEG tuner 4028. The tuner typically scans a range of frequencies, 
stopping only when a carrier frequency is detected within that range. The thus 
detected signals are transmitted to demodulator 4500, which demodulates the signals 
and transmits them to demultiplexer and filter 4502. 
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The demultiplexer and filter 4502 performs manipulation of the received datastream 
so that only the required components of the datastream are extracted by the 
receiver/decoder 2020 from the datastream. The data manipulation is conducted 
according to a manipulation protocol which is configurable in dependence on the 
5 conditional access system currently being used by the receiver/decoder. 

Data is transported in the MPEG data stream in the form of data packets of typically 
188 bytes within respective types of data stream, for example, video data streams, 
audio data streams and teletext data streams. Each packet is preceded by a Packet 
Identifier (PID) of 13 bits, one PID for every packet transported in the MPEG data 

10 stream. A programme map table (PMT table) contains a list of the different data 
streams and defines the contents of each data stream according to the respective PID. 
Each PMT table is associated with a respective broadcast channel. A PID may alert 
a device to the presence of applications in the data stream, the PID being identified 
using the PMT table. The value of the PID provides a parameter associated with the 

15 manipulation protocol. 

The data packets relating to applications, EMMs and ECMs typically comprise one or 
more MPEG sections. To enable video packets, audio packets, teletext packets and 
subtitle packets for a service to be downloaded by the receiver/decoder, the correct 
EMMs and ECMs must be provided beforehand. 

20 The manipulation protocol of the demultiplexer and filter 4502 utilises one or more 
of typically 8 bytes of an MPEG section of the data stream, typically offset byte 0 and 
offset bytes 3 to 9, to filter sections from the data stream to enable the desired 
application, EMM or ECM to be dovmloaded. In dependence on the value of the PID 
of the application, EMM or ECM to be downloaded, the filter is configurable to 

25 enable only that particular application, EMM or ECM to be downloaded. Following 
filtering by the demultiplexer and filter 4502, an EMM or ECM can be transmitted to 
the smartcard 3020 inserted in the smartcard reader of the receiver/decoder for storage 
therein. 
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Demultiplexer and filter 4502 is connected to a descrambler 4504, which in turn is 
connected to MPEG chip 4506. The chip 4506 in turn is connected to television 2022. 
The demultiplexer and filter 4502 typically provides up to 32 outputs connected to 
RAM volume 4022 of the memory 4024 of the receiver/decoder 2020. 

5 The video packets, audio packets, teletext packets and subtitle packets for a service are 
demultiplexed by the demultiplexer 4502, descrambled by the descrambler 4504, using 
a control word extracted from an ECM, and transmitted to MPEG chip 4506 for 
processing into signals in a form compatible with the television set 2022. 

EMM Loading 

10 The CA device 4100 controls the loading of EMMs in the receiver/decoder in 
dependence on the conditional access system being, or to be, used by the 
receiver/decoder 2020. 

A conditional access table (CAT table) contains a list of the different conditional 
access systems (in the form of system identifiers (CS IDs)) and defines the PIDs 3170 

15 of the EMMs associated with each CS ID for use in the demultiplexing and filtering 
of data. The CAT table is downloaded regularly fi-om the datastream and stored in a 
memory zone of the memory 4024 of the receiver/decoder 2020. The CAT table may 
be updated at any time, for example, if the PIDs of any of the EMMs identified 
thereby has changed because the EMM packets are being transmitted from a new 

20 transponder. 

When an updated CAT table has been downloaded in the receiver/decoder 2020, an 
application, using a command "CALL_SET_CAT", can inform the CA device 4100 
of the presence of the new CAT table. 

The list of PIDs for each system is used in the configuration of the demultiplexer and 
25 filter 4502 of the receiver/decoder 2020 so that, for the conditional access system 
being used by the receiver/decoder, the correct data manipulation protocol is used to 
enable the correct EMMs to be transmitted to, for example, the smartcard 3020. 
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Therefore, when there is a change in either: 

(i) the CAT table; or 

(ii) the conditional access system being used by the receiver/decoder; 

the demultiplexer and filter 4502 is updated to change the data manipulation protocol. 

5 Upon receipt of a command "CALL_SET_INFO" from an application, the CA device 

4100 identifies the conditional access system used by the receiver/decoder and 
generates, using the CAT table stored in the memory 4024, a table comprising the 
values of the PIDs of the EMMs of that conditional access system. 

When the CA device 4100 receives a command "IO_EMM_START*' from an 
10 application, the thus-generated table is transmitted to the demultiplexer and filter driver 
4"V04 to configure the demultiplexer and filter 4502 accordingly so that the correct 
manipulation protocol is used. The command returns a signal to the application 4057' 
indicating completion of the command, or failure of the command if an EMM is 
currently being downloaded or if no conditional access system has been set using the 
15 CA_SELECT command. 

The above operation of the CA device is summarised in Figure 13. 

First, in step SI 00, the CA device receives command "CALL_SET_CAT" via port 

4101 from an application which informs the CA device of a new CAT table in the 
memory 4024 of the receiver/decoder 2020. From the CAT table, the CA device is 

20 able to access a list of all of the different conditional access systems (in the form of 
system identifiers (CS IDs)) supported by the receiver/decoder 2020 and lists of the 
PIDs of the EMMs associated with each CS ID. These lists provide parameters 
associated with the manipulation protocol of the demultiplexer and filter 4502. 

Next, in step SI 02, the CA device receives command "CALL_SET_INFO" via port 
25 4101 from an application, which identifies the conditional access system used by the 
receiver/decoder and, in response, the CA device generates in step SI 04, using the 
CAT table, a table comprising the values of the PIDs of the EMMs of that conditional 
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access system only as retrieved from the memory 4204 via port 410L 

Finally, in step SI 06, the CA device receives command "IO_EMM_START" via port 
4101 from an application, and in step SI 08 the table generated in step SI 04 is 
transmitted to the demultiplexer and filter driver 4104 via port 4105 to configure the 
5 manipulation protocol for the demultiplexer and filter 4502, that is, to configure the 
filter of the demultiplexer and filter 4502, so that only the EMMs of that conditional 
access system can be dov^nloaded by the receiver/decoder 2020. 

In the above operation, only those parameters necessary to configure the manipulation 
protocol are transmitted to the demultiplexer and filter 4502. 

10 With respect to the subsequent handling of the downloaded EMMs, event 
"EVENT_CA_EMM" from the CA device 4100 is arranged to signal to an application 
the reception by a smartcard of an EMM transmitted thereto, and provide a parameter 
block addressed to an application which contains the address of the stored EMM and 
information provided by the smartcard driver 4102 via port 4103, this information 

15 depending on the conditional access system being used by the receiver/decoder 2020. 
Event "EVENT_CA_EMM_ ERROR" is arranged to signal the rejection by a 
smartcard of an EMM transmitted thereto, for example, if the smartcard does not have 
the right to store the EMM, and provide a data block addressed to the application 
which contains information provided by the smartcard, this information depending on 

20 the conditional access system being used by the receiver/decoder. 

Altematively, an "applicative" EMM (that is, an EMM transmitted in respect of an 
application) may be stored in the memory of the receiver/decoder, for example, in 
order to verify that the application 4056 is ftinctioning correctly. Event 
"EVENT_CA_APP_EMM" is arranged to signal to an application the reception of an 
25 applicative EMM. The event provides a data block addressed to the application which 
contains the address of the stored EMM. 



ECM Loading 
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The CA device 4100 manages the demultiplexing of ECMs for component 
descrambling. 

Using a command "CALL_ADD_ECM" an application provides the CA device 4100 
with the PID of an ECM to be loaded by the receiver/decoder 2020 as specified by the 
5 PMT table. The PMT table is stored in the memory 4024, which contains a list of the 
different data streams and defines the contents of each data stream according to the 
respective PID. The PID is provided together with any other information relating to 
the conditional access system selected using the CALL_SELECT command necessary 
to manage the ECM. Such information typically includes an identification of the 
10 conditional access system, the session number of a PPV event, and the index number 
of a PPV event. 

The CA device 4100 assigns an identifier "DESCR_ID" for the PID of the ECM and 
returns to the application, via device manager 4068, an address of the memory zone 
in which the DESCRJD for the PID of the ECM is to be found. An ECM PID 
15 corresponds to a unique DESCR_ID. Altematively, the CA device may retum to the 
application, via device manager 4068, an error message indicating that no conditional 
access system has been selected, the PID has been transmitted previously to the device, 
or that a predetermined maximum number of DESCR_IDs has been reached. 

The CA device 4100 also prepares to return the value of the PID to the demultiplexer 
20 and filter driver 4104 to enable the ECM to be received by the receiver/decoder. 

The application subsequently transmits a command "CALL_SERVICE_SET_PID" to 
the CA device 4100 to identify the addresses in the memory of the receiver/decoder 
of the PIDs of the video, audio, subtitle and teletext packets of the event to be 
demultiplexed. These values of these PIDs can be linked to the DESCR_ID identifier 
25 previously assigned to the PID of the ECM. The identifier can then be used by the 
application to identify the components of the datastream without the need for the 
application to receive values for all of these components. 
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Demultiplexing and filtering of the video, audio, subtitle and teletext packets does not 
commence until the application transmits a command '*CALL_SERVICE_START" to 
the CA device 4100. Upon receipt of this command, the CA device transmits to the 
demultiplexer and filter driver 4104 the value of the PID of the ECM and the data 
5 packets of the event. The ECM is demultiplexed, filtered and transmitted to the 
smartcard 3020 for storage therein. The control word for the descrambling of the 
components of the event is extracted from the ECM and transmitted to the descrambler 
4504. 

The above operation of the CA device is summarised in Figure 14. 

10 First, in step S200, the CA device receives command "CALL_ADD_ECM" via port 
4101 from an application,^ which provides the CA device 4100 with the FED of an 
ECM to be loaded by the receiver/decoder 2020 as specified by the PMT table, stored 
in the memory 4024 of the receiver/decoder. The CA device 4100 assigns an 
identifier DESCR_ID to the PID of the ECM and returns the address of the memory 

1 5 zone of the identifier to the application. 

Next, in step S202, the CA device receives command "CALL_SERVICE_SET__PID" 
from an application, which provides the CA device 4100 with the addresses in the 
memory of the receiver/decoder of the PIDs of the video, audio, subtitle and teletext 
packets of the event to be demultiplexed so that the values of the PIDs can be 
20 retrieved by the CA device 4100. The values of the PIDs are linked to the 
DESCR_ID assigned to the PID of the ECM. 

Finally, in step S204, the CA device receives command "CALL_SERVICE_START" 
via port 4101 firom an application, and in step S206 the CA device 4100 transmits to 
the demultiplexer and filter driver 4104 the value(s) of the PID(s) of the ECM and the 
25 packets of the event. 

Again, in the above operation, only those parameters necessary to configure the 
manipulation protocol are transmitted to the demultiplexer and filter 4502. In addition, 
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a single identifier DESCR_ID is assigned to the PIDs of the ECM and the various 
different types of data packet, to which the appHcation may subsequently refer without 
reference to all of the parameters linked thereto. 

As described above, the CA device 4100 manages the loading of EMMs and the 
5 demultiplexing of ECMs for component descrambling for any conditional access 
system supported by the receiver/decoder 2020. For each of these management 
functions of the CA device 4100, the same commands are sent by any application to 
the CA device 4100; with respect to EMM loading, the CA device receives commands 
"CALL_SET_CAT", "CALL_SET_INFO" and "CALL_EMM_START" from any 

10 application irrespective of the conditional access system to be used, and, with respect 
to ECM management, the CA device receives commands "CALL_ADD_ECM", 
"CALL_SERVICE_SET_PID" and"CALL_SERVICE_START" from any appUcation, 
again irrespective of the conditional access system to be used. The EMM loading and 
ECM management only commences after the receipt of the final command; there is 

15 no need to update, for example, the demultiplexer and filter 4502 until a command to 
start EMM loading is received by the CA device 4100. There is also no need to 
transmit all of the parameters listed in the CAT table and PMT table to the 
demultiplexer and filter 4502; only the parameters associated with the required 
manipulation protocol are transmitted to the demultiplexer and filter 4502. Similarly, 

20 there is no need to transmit all of the parameters in the PMT table to an application, 
only a DESCRIED identifier of the parameters. 

It will be understood that the present invention has been described above purely by 
way of example, and modifications of detail can be made within the scope of the 
invention. 

25 Each feature disclosed in the description, and (where appropriate) the claims and 
drawings may be provided independently or in any appropriate combination. 



In the aforementioned preferred embodiments, certain features of the present invention 
have been implemented using computer software. However, it will of course be clear 
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to the skilled man that any of these features may be implemented using hardware. 
Furthermore, it will be readily understood that the functions performed by the 
hardware, the computer software, and such like are performed on or using electrical 
and like signals. 
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CLAIMS 

1. A device for use in a receiver/decoder operable with different conditional 
access systems, the receiver/decoder including means for manipulating data received 
by the receiver/decoder according to a manipulation protocol which is configurable in 
5 dependence on the conditional access system, and means for storing parameters 
associated with the manipulation protocol, the device comprising: 

means for receiving a command instructing configuration of the manipulation 
protocol in dependence on the conditional access system; 

means for retrieving a parameter from the storage means in dependence on the 
10 command; and 

means for outputting said parameter to the manipulation means for use in 
configuring the manipulation protocol, whereby the manipulation means is not required 
to receive all parameters necessary to configure the manipulation protocol in 
dependence on all of the conditional access systems. 

15 2. A device according to Claim 1, arranged to output said parameter to the 
manipulation means upon receipt of a command instructing output of said parameter. 

3. A device according to Claim 1 or 2, comprising means for receiving a 
command notifying the device of updating of the parameters stored in the storage 
means. 

20 4. A device according to any preceding claim, wherein said parameters include 
an identifier of the conditional access system currently being used by the 
receiver/decoder. 

5. A device according to Claim 4, wherein said parameter is associated with said 
identifier. 

25 6. A device according to any preceding claim, wherein the device is capable of 
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receiving commands from a configuring application. 

7. A device according to Claim 6, v^herein the device is capable of changing an 
identifier of the conditional access system currently being used by the receiver/decoder 
in response to a command from the configuring application. 

8. A device according to any preceding claim, wherein each said parameter 
comprises at least one byte of a section of a data packet to be received by the 
recevier/decoder. 

9. A device according to any preceding claim, wherein each said parameter 
comprises an identifier of a data packet to be received by the receiver/decoder. 

10. A device according to Claim 9, wherein said parameters include an identifier 
of an entitlement management message (EMM). 

11. A device according to Claim 9, wherein said parameters include an identifier 
of an entitlement control message (ECM). 

12. A device according to any preceding claim, arranged to receive requests from 
a plurality of client applications for a plurality of parameters. 

13. A receiver/decoder including a device according to any preceding claim, said 
manipulation means arranged to operate under the control of the device to manipulate 
data and said means for storing parameters associated with the manipulation protocol. 

14. A receiver/decoder according to Claim 13, wherein said manipulation means 
comprises a demultiplexer and filter operable to filter specific components of data 
from the data received by the receiving means. 

15. A receiver/decoder according to Claim 14, wherein the manipulation protocol 
changes the filter so that only specific components of the data received by the 
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receiving means are downloaded by the receiver/decoder. 

16. A method of configuring a receiver/decoder to access data, the receiver/decoder 
including means for manipulating data received by the receiver/decoder according to 
a manipulation protocol which is configurable in dependence on the conditional access 
system, and means for storing parameters associated with the manipulation protocol, 
the method comprising the steps of:- 

receiving a command instructing configuration of the manipulation protocol in 
dependence on the conditional access system; 

retrieving a parameter from the storage means in dependence on the command; 

and 

outputting said parameter to the manipulation means for use in configuring the 
manipulation protocol, whereby the manipulation means is not required to receive all 
parameters necessary to configure the manipulation protocol in dependence on all of 
the conditional access systems. 

17. A method according to Claim 1 6, wherein said parameter is output upon receipt 
of a command instructing output of said parameter. 

18. A method according to Claim 16 or 17, comprising the step of receiving a 
command notifying the device of updating of the parameters stored in the storage 
means. 

19. A method according to any of Claims 16 to 18, wherein said parameters 
include an identifier of the conditional access system currently being used by the 
receiver/decoder. 

20. A method according to Claim 19, wherein the parameter output to the 
manipulation means is associated with said identifier. 

21. A method according to any of Claims 16 to 20, wherein commands are 
received from a configuring application. 
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22. A method according to Claim 21, wherein an identifier of the conditional 
access system currently being used by the receiver/decoder is changed in response to 
a command from the configuring application. 

23. A method according to any of Claims 16 to 22, wherein each said parameter 
comprises at least one byte of a section of a data packet to be received by the 
recevier/decoder. 

24. A method according to any of Claims 16 to 23, wherein each said parameter 
comprises an identifier of a data packet to be received by the receiver/decoder. 

25. A method according to Claim 24, wherein said parameters include an identifier 
of an entitlement management message (EMM). 

26. A method according to Claim 24, wherein said parameters include an identifier 
of an entitlement control message (ECM). 

27. A method according to any of Claims 16 to 24, wherein requests are received 
from a plurality of client applications for a plurality of parameters. 

28. A device for use in a receiver/decoder, the receiver/decoder including means 
for storing parameters associated with manipulating data received by the 
receiver/decoder, and at least one application or further device, the device comprising: 

means for generating an identifier for at least one parameter; and 

means for outputting said identifier to said at least one application or further 

device. 

29. A device according to Claim 28, the receiver/decoder being operable with 
different conditional access systems, said parameters being associated with 
manipulating data received by the receiver/decoder according to a manipulation 
protocol which is configurable in dependence on the conditional access system. 
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30. A device according to Claim 28 or 29, wherein said at least one parameter 
comprises an identifier of a data packet to be received by the receiver/decoder. 

31 . A device according to Claim 30, wherein said at least one parameter comprises 
an identifier of an entitlement control message (ECM) to be received by the 

5 receiver/decoder. 

32. A device according to Claim 30 or 31, wherein said at least one parameter 
comprises respective identifiers of video, audio, teletext and subtitle data packets of 
an event to be received by the receiver/decoder. 

33. A device according to any of Claims 28 to 32, arranged to store a plurality of 
10 parameters, each having a respective assigned identifier. 

34. A receiver/decoder including a device according to any of Claims 28 to 33, and 
said means for storing parameters associated with the manipulation of data received 
by the receiver/decoder, and said further device or said application. 

35. A method of configuring a receiver/decoder, the receiver/decoder including 
15 means for storing parameters associated with manipulating data received by the 

receiver/decoder, and at least one application or further device, the method comprising: 
generating an identifier for at least one parameter; and 
outputting said identifier to said at least one application or further device. 

36. A method according to Claim 35, wherein the receiver/decoder is operable with 
20 different conditional access systems, and said parameters are associated with 

manipulating data received by the receiver/decoder according to a manipulation 
protocol which is configurable in dependence on the conditional access system 

37. A method according to Claim 35 or 36, wherein said at least one parameter 
comprises an identifier of a data packet to be received by the receiver/decoder. 
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38. A method according to Claim 37, wherein said at least one parameter 
comprises an identifier of an entitlement control message (ECM) to be received by the 
receiver/decoder. c 

39. A method according to Claim 37 or 38, wherein said at least one parameter 
comprises respective identifiers of video, audio, teletext and subtitle data packets of 
an event to be received by the receiver/decoder. 

40. A method according to any of Claims 35 to 39, further comprising storing a 
plurality of parameters, each having a respective assigned identifier. 

41. A device for use in a receiver/decoder substantially as herein described with 
reference to the accompanying drawings. 



42. A method of configuring a receiver/decoder substantially as herein described 
with reference to the accompanying drawings. 



wo 99/40719 



1/12 



PCT/IB99/00274 




wo 99/40719 



2/12 



PCT/IB99/00274 



Fig.2. 



3016 



3014 



3018 





2012 



2016 



r 


2008 




2018 




3020 



2020 



2Q2A 



3024 




2030 




4002 



wo 99/40719 




PCT/1B99/00274 



3/12 



CO 

Ll 



CO 
CD 
O 
CO 



CD 
CD 
O 
CO 



LU 
Z) 

< 

O 
cn 



CD 
O 
CO 



CM 
CD 
O 
CO 

DC 
LU 
CL 

o 

oc 

CL 



LU 



o 

CD 
O 
CO 

DC 
LU 
Q 
< 
LU 
X 



wo 99/40719 




PCT/IB99/00274 



4/12 



LU 
Z) 



CO 



CD 

o 

CO 



o 

CO 

9 

CL 



CVl 
CO 



CM 
CO 
O 
CO 

DC 
LU 
CL 

o 

CL 



LU 



Q CD 

<o 

LLl 
X 



CO 



wo 99/40719 




PCT/1B99/00274 



5/12 



Fig. 5. 




167 



Fig.7. 



SESSION ID 


SESSION 


MODE 


SESSION 


INDEX 


SESSION 


VIEW 



168 



169 

170 
171 



wo 99/40719 




PCT/IB99/00274 



6/12 



Fig.6. 







CARD 


ID ZONE 


151 




RANDOM 


GEN 


. ZONE 


152 




MANAGEMENT 


ZONE 


153 






OPERATOR 


1 ID 


154 






OPERATOR 


2 ID 


155 


1 

1 
1 








OPERATOR 


N ID 


J56 


1 


EMM 
KEY 


DATA 


157 


1 


ECM 
KEY 


DATA 


159 


2 


EMM 
KEY 


DATA 




1 


SUBS 
BITMAP 


DATA 


161 


0 


OBJECT 
FREE 




166 


3 


ECM 
KEY 


DATA 




1 


TOKEN 
WALLET 


DATA 


163 


1 


PPV 
EVENT 


DATA 


165 


1 1 
1 1 
1 1 
1 i 




N 


ECM 
KEY 


DATA 





wo 99/40719 



PCT/IB99/00274 



7/12 



4056 



Fig. 8. 

4057 4056 




4007 



4062 



4060 



i i 




DEV 




DEV 




DEV 
DR 




DEV 
DR 


) 


) 






l/F 




l/F 



4064 



DEV 



4068 



4066 



^4061 



wo 99/40719 



8/12 



PCT/IB99/00274 



Fig.9. 



2018 



4036 
I 



CARD READERS 



MODEM 



SER 
l/F 



1 



Rx 



L 



2!d2<6 



H/SET 



2030 



MPEG 
l/F 



HSET 
l/F 



2022 



TV 





PAR 




l/F 



^4028 



4030 



^4032 



DECODER 



4002 



2020 



wo 99/40719 



PCT/IB99/00274 



EVENT 

FILTER 



QUEUES 




P SEQ 
DR 



105 



s 


N 












J 


J 



P SEQ UNITS 



106 



P SEQ ENG 



108 



SCR 




SCR 


MEM 




SEL 



107 



109 




04 



VM 
4007 



DEV 
MAN 
4068 



wo 99/40719 




PCT/IB99/00274 



10/12 



Fig.11. 



MEMORY 
4024 



4102 



APPLICATION 



4057 



4101 



CA 
DEVICE 



APPLICATION 



4056 



4100 





y1 

4103-^ 


14105 


SMARTCARD 




DEMULT. 


DEV. DR. 




DEV. DR. 



4104 



4068 




L 



4061 



HARDWARE 



wo 99/40719 




PCT/IB99/00274 



CM 

Ll 




o 
o 

CM 




a 
a 

iC 








CO 

5 




1 


2018 





o 

< 
-J 

O 
O 

LU 
Q 



CO 
-J 

g 

CO 



wo 99/40719 



12/12 



PCT/IB99/00274 



Fig. 13. 



Fig. 14. 



RECEIVE COMMAND 
"CALL SET CAT' 



S100 



RECEIVE COMMAND 
"CALL ADD ECM" 



S200 



I 



RECEIVE COMMAND 
"CALL SET INFO" 



SI 02 



RECEIVE COMMAND 
"CALL_SERVICE SET PID" 



S202 



GENERATE TABLE 



SI 04 



RECEIVE COMMAND 
"CALL_SERViCE_STARr' 



S206 



REVCEIVE COMMAND 
"10 EMM START' 



SI 06 



TRANSMIT VALUE(S) 
OF THE PIDs TO DEMUX 
AND FILTER DRIVER 



S208 



TRANSMIT TABLE TO 
DEMUX AND FILTER 
DRIVE 4104 



S108 



INTERN 



NAL SEARCH REPORT 



Intel ^IPrI Application No 

PCT/IB 99/00274 



A. CLASSIFICATION OF SUBJECT MATTER ^ 

IPC 6 H04N1/00 H04N7/16 H04N7/167 



According to Intemationat Patent Classitication <IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 

IPC 6 H04N 



Documentation searched other than minimum documentation to the e)rt6nt that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and, where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ' Citation of document, wrth indication, where appropriate, of the relevant passages 



Relevant to claim No. 



us 5 440 632 A (BACON KINNEY C ET AL) 
8 August 1995 



see column 2, line 6 - column 3, line 64 
see column 8, line 12 - column 9, line 52 
see column 10, line 51 - line 68 
see figures 2-4,7-10 

EP 0 562 295 A (THOMSON CONSUMER 
ELECTRONICS) 29 September 1993 
see page 2, line 12 - line 32 
see page 3, line 6 - line 19 
see figure 1 



1,2,13, 

16,17, 

24, 

27-29 , 
34,35 



-/-- 



12,27, 
30,40 



Further documents are listed in the continuation of box C 



Patent family members are listed in annex. 



° Special categories of cited documents : 

"A" document defining the general state of the art which is not 

considered to be of particular relevance 
"E" eartier document but published on or after the international 

filing date 

"L" document which may throw doubts on priority claim(s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or 
other means 

"P" document published prior to the intemational filing date but 
later than the priority date claimed 



'T" later document published after the intemational filing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory undertying the 
invention 

"X" document of particular relevance; the claimed invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

"Y " document of particular relevance; the claimed invention 

cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

"&" document member of the same patent family 



Date of the actual completion of the intemational search 



17 May 1999 



Date of mailing of the international search report 



21/05/1999 



Name and mailing address of the ISA 

European Patent Office, P.B. 5818 Patentlaan 2 
NL - 2280 HV Rijswijk 
Tel. (+31-70) 340-2040, Tx. 31 651 epo nl. 
Fax: (+31-70) 340-3016 



Authorized officer 



Van der Zaal , R 



Form PCT/ISA/210 (second sheet) (July 1992) 



page 1 of 2 



internjM[)nal search report 



Intet^Vial Application No 

PCT/IB 99/00274 



C.(Conttnuation) DOCUMENTS CONSIDERED TO BE RELEVANT 



Category '* Citation of document, with indication.where appropriate, of the relevant passages 



Relevant to claim No. 



EP 0 723 371 A (THOMSON MULTIMEDIA SA) 
24 July 1996 

see page 3, column 3, line 57 - page 5, 
column 7, line 8 
see figures 2-4 

"FUNCTIONAL MODEL OF A CONDITIONAL ACCESS 
SYSTEM" 

EBU REVIEW- TECHNICAL, 

no. 266, 21 December 1995, pages 64-77, 

XP000559450 



10,11, 
25,26 



Fofm PCT/ISA/210 (continuatioo of second sheet) (July 1992) 



page 2 of 2 



INTERN/i^pNAL SEARCH REPORT 

information on patent family members 



Intei ^^Vfiat Application No 

PCT/IB 99/00274 



Patent document 
cited in search report 


Publication 
date 


Patent tamlly 
member(s) 


Publication 
date 


US 5440632 


A 


08-08-1995 


US 


5715515 


A 


03-02-1998 


EP 0562295 


A 


29-09-1993 


BR 


9300727 


A 


08-09-1993 








DE 


69310255 


D 


05-06-1997 








DE 


69310255 


T 


1 A AO 1 Oft7 

14-Uo-iy9/ 








HK 


1000989 


A 


15-05-1998 








SG 


45443 


A 


16-01-1998 


EP 0723371 


A 


24-07-1996 


FR 
JP 


2729521 
8307850 


A 
A 


19-07-1996 
22-11-1996 



Form PCT/ISA/210 (patent tamiiy annex) (July 1992) 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of tlie Official Record 



Defective images within this document are accurate representations of the original 
documents submitted by the appHcant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SffiES 



□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning tliese documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



BEST AVAILABLE IMAGES 




FADED TEXT OR DRAWING 



